Privacy Policy

Operated by EXPBOX BRANDS LLP, exp.club is committed to protecting your privacy and ensuring the security of your personal information. This privacy policy details how we collect, use, and protect your data.

1. Information Collection

   1. 1.1Account Information

      We collect:

      • Name
      • Email address
      • Authentication preferences
      • Profile information

   2. 1.2Platform Usage Data

      We collect:

      • Team formation and membership data
      • Mentorship session schedules
      • Program duration selections
      • Payment and transaction records
      • Platform interaction data

   3. 1.3Technical Data

      We automatically collect:

      • Browser and device information
      • IP address
      • Session duration
      • Feature usage statistics
      • Error logs

2. Data Storage and Processing

   1. 2.1Data Storage

      • All user data is hosted and processed through Supabase
      • Encryption is implemented for data in transit and at rest
      • Regular backups are maintained for data security

   2. 2.2Authentication Methods

      Users can choose between:

      • Google Authentication
      • Email-based OTP via Supabase Auth

3. Data Usage

   1. 3.1Primary Uses

      We use your data to:

      • Facilitate team formation and management
      • Schedule and manage mentorship sessions
      • Process payments and refunds
      • Maintain platform security
      • Improve user experience

   2. 3.2Communications

      We send communications regarding:

      • Mentorship sessions
      • Team activities
      • Platform updates
      • Security alerts
      • Service changes

4. Cookie Policy

   1. 4.1Essential Cookies

      Used for:

      • Authentication status
      • Session management
      • Security tokens
      • User preferences

   2. 4.2Functional Storage

      Used for:

      • Interface customization
      • Session state
      • Technical preferences
      • Performance optimization

   3. 4.3Cookie Controls

      Users can:

      • Manage cookie preferences
      • Clear local storage
      • Opt out of non-essential cookies
      • Control browser settings

5. Third-Party Services

   1. 5.1Service Providers

      We share data with:

      • Supabase (database and authentication)
      • Google Authentication (optional login)
      • Payment processors

   2. 5.2Data Protection

      All third-party providers:

      • Maintain appropriate security measures
      • Process data according to our agreements
      • Comply with relevant data protection laws

6. User Rights and Control

   1. 6.1User Rights

      You have the right to:

      • Access your personal data: You can request a copy of the personal data we hold about you at any time.
      • Request data correction: If you believe that any information we hold about you is incorrect or incomplete, you have the right to request that we correct or complete it.
      • Request data deletion: You have the right to request that we delete your personal data under certain conditions, such as when it is no longer necessary for the purposes for which it was collected.
      • Export your data: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
      • Object to processing: You have the right to object to our processing of your personal data, under certain conditions.
      • Withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

   2. 6.2Data Retention

      • Account data retained while account is active
      • Team/project data retained for 12 months after completion
      • Technical logs retained for 6 months
      • Users can request earlier deletion

7. Security Measures

   1. 7.1Technical Security

      • Data encryption in transit and at rest
      • Regular security audits
      • Automated threat detection
      • Secure authentication protocols

   2. 7.2Organizational Security

      • Access control procedures
      • Regular security training
      • Incident response plans
      • Data protection reviews

8. Children's Privacy

   • Services not intended for users under 13
   • We do not knowingly collect data from children
   • Parent/guardian consent required for users under 18

9. International Data Transfers

   • Data may be processed in different countries
   • Appropriate safeguards are maintained
   • Data protection standards are upheld

10. Changes to Privacy Policy

    • We reserve the right to update this policy
    • Users will be notified of significant changes
    • Continued use indicates acceptance

11. Contact Information

    For privacy-related questions:

    • Email: hi@exp.club
    • Website: www.exp.club